spec: authenticated udp

[dshulyak]

rendered

[Copilot]

Pull Request Overview

This PR introduces a comprehensive specification for an authenticated peer-to-peer UDP protocol designed to address denial-of-service protection and traffic prioritization in RaptorCast communication. The protocol follows the WireGuard design with modifications to support secp256k1 keys and AEGIS128L encryption for improved performance.

Key changes:

• Defines a complete authenticated UDP protocol using Noise IK handshake pattern with secp256k1, AEGIS128L, and BLAKE3
• Implements DoS protection through cookie-based rate limiting and session management
• Provides integration specifications for RaptorCast and discovery services

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[dnkolegov-ar]

Should it be Type as in the Field descriptions?

[dnkolegov-ar]

Suggested change

	Session establishment follows the Noise IK handshake pattern:
	Session establishment follows the NoiseIKpsk2 handshake pattern:

[dnkolegov-ar]

In WireGuard, these keys are calculated differently. It should be

let temp = keyed_hash(&chaining_key, &[]);
let send_key = keyed_hash(&temp, &[0x1]);
let recv_key = keyed_hash(&temp, &[&send_key, &[0x2]].concat());

Is it intentional?

[dshulyak]

thanks, i will revert to wireguard specification, i can't recall now if i reused it from somewhere or just mistyped